Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cV34RB5iW4uaaJnelVHZG8sFNMk.roa
File: cV34RB5iW4uaaJnelVHZG8sFNMk.roa (raw, json)
Hash identifier: eSe6ao/5nHJUrmW7wLk0Ze3v+wKJtrm3eMAXfE1M3BI=
Subject key identifier: 71:5D:F8:44:1E:62:5B:8B:9A:68:99:DE:95:51:D9:1B:CB:05:34:C9
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018F35996701608CE8D413F4BE73F9E24F1A
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cV34RB5iW4uaaJnelVHZG8sFNMk.roa
Signing time: Wed 01 May 2024 19:19:56 +0000
ROA not before: Wed 01 May 2024 19:19:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.108.64.0/21 maxlen: 24
91.108.72.0/21 maxlen: 24
91.108.80.0/21 maxlen: 24
91.108.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 13:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:99:67:01:60:8c:e8:d4:13:f4:be:73:f9:e2:4f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: May 1 19:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=715df8441e625b8b9a6899de9551d91bcb0534c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:e4:3e:92:fb:48:28:23:10:8c:dc:5f:b0:
32:be:e2:28:d1:fd:45:b5:41:25:2c:db:28:18:b1:
1c:6a:90:6f:93:a2:c8:78:50:63:bd:6c:48:d3:c1:
05:1c:c8:4b:b8:81:47:59:e4:7b:4e:c3:ac:15:02:
79:26:e9:22:2d:74:30:3d:f1:9e:9f:17:66:55:49:
e4:ab:f2:b8:6b:cb:d7:7e:de:31:5d:36:50:4e:91:
05:9c:8f:4f:73:7d:c4:28:8f:53:2b:61:14:81:c6:
bc:73:51:02:5f:d1:a0:9e:cd:52:6e:c3:d1:5a:c3:
b3:53:9b:1d:42:51:30:01:54:47:75:9f:35:ae:d9:
bf:8a:10:3c:c0:a4:19:16:8f:05:83:7e:65:8d:57:
88:12:59:43:d2:d3:b5:2e:69:28:78:f0:cb:a7:2a:
6e:62:c3:03:4b:e5:7a:d1:d6:34:91:23:60:01:eb:
8b:4a:6f:b8:d4:90:df:fe:07:ca:71:2b:3f:a3:4b:
f7:bb:65:f5:99:c0:f2:72:9d:d6:32:19:db:dc:87:
d4:79:99:1d:15:db:d1:96:c8:b7:42:61:9b:0e:11:
d2:85:dc:ea:e3:1c:bf:be:9d:6f:30:1d:9f:36:89:
00:e9:9f:95:b2:e9:f8:83:72:72:55:20:09:2a:79:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:F8:44:1E:62:5B:8B:9A:68:99:DE:95:51:D9:1B:CB:05:34:C9
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cV34RB5iW4uaaJnelVHZG8sFNMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:07:11:2a:78:21:ca:96:f9:49:fb:e1:fa:3d:21:be:e0:a0:
8c:9e:89:a2:96:91:51:3b:45:6d:9a:50:89:b9:79:bb:d8:8e:
65:5f:87:2c:62:71:ab:69:6c:08:5c:a0:a9:1b:b6:b0:8f:f9:
39:4c:87:24:3a:ee:6e:f1:aa:0c:4e:75:21:2e:8c:93:15:42:
a5:00:bc:e4:1c:87:81:2f:fd:ce:f4:59:89:af:de:0f:03:05:
80:89:38:aa:ac:3b:ab:48:90:94:b4:8c:b3:3c:23:4e:53:53:
08:0d:9e:af:cb:ff:1c:d7:d1:e4:1e:c1:dd:c1:85:81:69:34:
d5:51:0b:f5:ca:23:94:bc:8c:8a:35:73:6e:1b:f5:e3:ab:25:
ea:cd:f1:83:d6:73:ad:f8:4b:d8:ce:30:f4:5b:10:bd:60:c7:
6b:6b:44:b9:2c:1d:53:b9:f4:67:67:5d:46:b5:ca:db:41:45:
84:4f:d2:ae:2c:c4:54:1e:e8:bc:e4:9e:a3:a1:dd:da:d9:e8:
30:26:b5:92:68:85:49:0a:55:14:bc:e2:9e:1f:1a:7d:1a:ef:
e0:52:c7:28:4d:14:3f:4a:f5:a7:23:68:b3:87:08:46:c9:eb:
83:fc:4d:05:8a:79:66:17:97:04:0c:43:28:f5:db:65:d6:cc:
76:73:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org